$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: /k8qwp0kCtqY2o0+dHqxhKkIjL/HNWD2WTwA7hYYctE= Subject key identifier: DD:55:35:E3:C7:ED:CE:3F:AC:EA:D6:CD:AB:56:A3:11:03:F5:77:95 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019DA3AF27496A26F8B9959269B846644F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0C20 Signing time: Sun 19 Apr 2026 03:00:58 +0000 Manifest this update: Sun 19 Apr 2026 03:00:58 +0000 Manifest next update: Mon 20 Apr 2026 03:00:58 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (hash: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=) 15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: cHxemTPwY0wGL+yvT0U7j4tEJrtMZ2kX78TJ1a5o18Y=) 16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:af:27:49:6a:26:f8:b9:95:92:69:b8:46:64:4f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Apr 19 03:00:58 2026 GMT Not After : Apr 20 03:00:58 2026 GMT Subject: CN=dd5535e3c7edce3facead6cdab56a31103f57795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:33:1c:f3:1e:f9:b9:44:43:03:d2:31:87: 76:88:4c:72:5f:01:50:ec:d3:8b:4d:15:bb:88:b9: ab:41:31:e3:55:14:ff:39:43:db:e7:37:41:bc:7e: cd:c6:6c:f5:5e:8b:6a:0d:06:91:69:39:03:73:d0: 69:0c:46:f5:80:6c:e2:81:74:9a:78:dd:03:e0:49: b9:01:d7:40:01:bc:3a:9b:f8:24:70:4f:1e:44:af: 20:dd:c4:50:45:59:f1:0b:be:d2:f6:28:59:33:b1: 5c:9c:d8:72:d5:05:f3:f0:b9:80:72:7c:36:fc:a7: cb:42:8d:3f:c5:b1:b6:70:41:80:42:2d:7f:98:ba: 39:2c:e9:0c:e9:e4:0d:fa:e1:b4:a0:20:3d:9b:57: e1:5f:30:56:a8:11:a5:19:56:97:8e:99:e4:c4:0c: b9:4c:52:81:10:17:d4:a0:61:90:f2:bc:4e:67:fb: c6:e3:dd:65:be:4f:f7:8e:19:a6:ec:1c:aa:97:b7: 95:90:76:71:6a:73:15:e9:1f:ca:fd:4d:38:08:18: 82:3c:0a:bd:93:b8:ee:57:8a:a7:85:d9:08:a6:22: f2:5f:c5:d6:1f:ed:49:e7:cc:ed:54:22:27:79:e2: 35:ac:5a:43:73:88:53:e5:9d:ae:f1:84:2b:45:99: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:35:E3:C7:ED:CE:3F:AC:EA:D6:CD:AB:56:A3:11:03:F5:77:95 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:aa:79:a1:31:14:aa:75:54:d5:81:c0:a4:5e:b1:2b:1a:02: 1a:f8:b1:c8:f4:fb:da:9f:92:1b:06:6a:04:51:30:40:e9:46: 9f:4a:4e:73:bd:1d:c7:8e:17:55:0c:7e:2e:98:50:8a:0f:65: 84:1f:25:b9:96:9e:6c:1c:00:21:d8:a9:bb:87:c5:6d:f4:51: d9:c2:ae:3f:e1:73:29:1a:af:78:db:eb:3c:b4:e1:19:23:af: 00:41:e2:1f:42:19:ae:46:b2:c1:f8:a3:84:5c:b1:37:64:1e: 17:de:fb:b4:d5:c7:71:a0:1b:2d:47:2b:55:8a:3b:57:a0:b1: 67:10:d4:86:e4:c6:99:35:71:9d:dd:41:8b:f4:78:1b:27:46: 09:d9:3a:f3:6c:7c:a5:c6:a0:31:00:86:17:ea:af:46:0a:3a: 8f:20:a9:91:9a:f6:a4:14:6d:45:0a:85:c0:2c:2e:47:0d:80: 00:02:e1:3c:4b:57:8e:84:62:a0:24:33:73:6e:7a:54:83:46: d3:15:3e:ba:4a:d1:2f:05:24:26:01:bf:c8:db:19:a0:65:d8: b6:80:99:85:ff:4a:a3:a3:43:be:ed:31:a2:c5:99:89:f7:95: 7f:56:91:ca:b3:d8:70:10:ab:79:01:a5:d9:e0:bb:4e:06:a2: 46:ce:3f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jrydJaib4uZWSabhGZE+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwNDE5MDMwMDU4WhcNMjYwNDIwMDMwMDU4WjAzMTEwLwYDVQQD EyhkZDU1MzVlM2M3ZWRjZTNmYWNlYWQ2Y2RhYjU2YTMxMTAzZjU3Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4zHPMe+blEQwPSMYd2iExyXwFQ 7NOLTRW7iLmrQTHjVRT/OUPb5zdBvH7Nxmz1XotqDQaRaTkDc9BpDEb1gGzigXSa eN0D4Em5AddAAbw6m/gkcE8eRK8g3cRQRVnxC77S9ihZM7FcnNhy1QXz8LmAcnw2 /KfLQo0/xbG2cEGAQi1/mLo5LOkM6eQN+uG0oCA9m1fhXzBWqBGlGVaXjpnkxAy5 TFKBEBfUoGGQ8rxOZ/vG491lvk/3jhmm7Byql7eVkHZxanMV6R/K/U04CBiCPAq9 k7juV4qnhdkIpiLyX8XWH+1J58ztVCIneeI1rFpDc4hT5Z2u8YQrRZn4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1VNePH7c4/rOrWzatWoxED9XeVMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6p5oTEU qnVU1YHApF6xKxoCGvixyPT72p+SGwZqBFEwQOlGn0pOc70dx44XVQx+LphQig9l hB8luZaebBwAIdipu4fFbfRR2cKuP+FzKRqveNvrPLThGSOvAEHiH0IZrkaywfij hFyxN2QeF977tNXHcaAbLUcrVYo7V6CxZxDUhuTGmTVxnd1Bi/R4GydGCdk682x8 pcagMQCGF+qvRgo6jyCpkZr2pBRtRQqFwCwuRw2AAALhPEtXjoRioCQzc256VING 0xU+ukrRLwUkJgG/yNsZoGXYtoCZhf9Ko6NDvu0xosWZifeVf1aRyrPYcBCreQGl 2eC7TgaiRs4/qw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:33:22 2026 by rpki-client